
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c86cc3-3478-4407-8491-7dc873f5285b/1/SCJSDeYUN6bOZcbjRidHBwPmXtE.mft
File: SCJSDeYUN6bOZcbjRidHBwPmXtE.mft (raw, json)
Hash identifier: 2oyatJncJXjP6ryAPEyeqEdnomtcgR31OAvl7to8ZI4=
Subject key identifier: 94:14:36:D4:E5:61:5B:8E:69:2A:B6:C2:0E:63:1A:19:79:61:EE:80
Authority key identifier: 48:22:52:0D:E6:14:37:A6:CE:65:C6:E3:46:27:47:07:03:E6:5E:D1
Certificate issuer: /CN=4822520de61437a6ce65c6e34627470703e65ed1
Certificate serial: 019D2B8552A0846DCCAB02E8CBFB58A69B42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SCJSDeYUN6bOZcbjRidHBwPmXtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/c86cc3-3478-4407-8491-7dc873f5285b/1/SCJSDeYUN6bOZcbjRidHBwPmXtE.mft
Manifest number: A0
Signing time: Thu 26 Mar 2026 19:00:50 +0000
Manifest this update: Thu 26 Mar 2026 19:00:50 +0000
Manifest next update: Fri 27 Mar 2026 19:00:50 +0000
Files and hashes: 1: SCJSDeYUN6bOZcbjRidHBwPmXtE.crl (hash: evGyqBiU+Z1HptnoZ7X9S1jVDyGovJ3Y+UIE50MzNmk=)
2: hy7V_eg1KosUr6B48auj7x_GyG0.roa (hash: esE+dAQn3fgKAAwpaNKRZUcrbj7NuDcvWUlHXEbNi8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/c86cc3-3478-4407-8491-7dc873f5285b/1/SCJSDeYUN6bOZcbjRidHBwPmXtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/c86cc3-3478-4407-8491-7dc873f5285b/1/SCJSDeYUN6bOZcbjRidHBwPmXtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SCJSDeYUN6bOZcbjRidHBwPmXtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:85:52:a0:84:6d:cc:ab:02:e8:cb:fb:58:a6:9b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4822520de61437a6ce65c6e34627470703e65ed1
Validity
Not Before: Mar 26 19:00:50 2026 GMT
Not After : Mar 27 19:00:50 2026 GMT
Subject: CN=941436d4e5615b8e692ab6c20e631a197961ee80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a9:53:8d:d1:59:35:a1:bd:74:28:29:a4:f0:
6a:0f:05:92:71:33:da:25:e1:3e:83:bc:e9:ce:e8:
84:df:f6:5c:d8:13:90:90:34:9c:73:49:13:c3:c9:
5c:52:25:4b:5b:bf:9a:ff:87:e2:fb:2f:2e:9f:1e:
05:a6:0d:1c:e7:13:21:3e:bb:72:1e:40:2a:59:8e:
1e:a1:6d:ed:53:10:39:75:d0:31:49:ae:c3:d9:d9:
01:6f:fd:6a:ef:9c:de:08:37:8f:60:2d:fb:18:f5:
79:ba:4d:fc:f2:bc:8d:99:0e:7b:38:de:f3:80:1f:
93:d0:cf:f9:fc:46:eb:d0:76:b2:ed:b7:e4:db:07:
4f:b6:39:ec:5b:db:17:3f:f1:13:33:7f:c9:49:1b:
d9:fe:31:50:0f:5a:96:5b:60:90:8d:95:86:dd:2c:
3a:e3:87:fa:07:84:e0:34:9f:fa:01:cb:4a:25:b2:
1f:57:29:f4:b7:5c:21:47:21:3a:cf:31:f3:ba:bf:
f0:9b:1e:3a:3e:50:89:36:07:d7:b0:59:1e:94:bc:
cc:9b:e8:ec:16:8e:1c:04:58:45:85:a3:bf:d1:bd:
69:1f:88:fc:fb:17:47:a6:06:9c:22:3f:9c:65:dc:
bc:99:47:62:83:58:a3:fe:e8:20:bf:3a:7f:d0:45:
5c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:14:36:D4:E5:61:5B:8E:69:2A:B6:C2:0E:63:1A:19:79:61:EE:80
X509v3 Authority Key Identifier:
keyid:48:22:52:0D:E6:14:37:A6:CE:65:C6:E3:46:27:47:07:03:E6:5E:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SCJSDeYUN6bOZcbjRidHBwPmXtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c86cc3-3478-4407-8491-7dc873f5285b/1/SCJSDeYUN6bOZcbjRidHBwPmXtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c86cc3-3478-4407-8491-7dc873f5285b/1/SCJSDeYUN6bOZcbjRidHBwPmXtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:75:58:45:44:4e:5d:91:45:bf:70:43:cd:0a:35:57:f5:2d:
b2:c1:87:3d:1e:5e:10:f6:48:75:ac:29:17:8d:28:19:59:cd:
3b:73:71:c5:06:18:ee:63:b7:69:96:74:c7:a1:55:d4:a2:e6:
29:22:a8:07:fa:c5:14:85:5b:a5:cb:ce:3f:2a:42:d6:b7:e2:
e0:af:e0:82:df:1b:a8:87:52:78:0b:6b:32:75:83:e1:52:f1:
c5:96:d2:c5:98:23:fe:b8:da:c0:1c:e3:8e:12:f1:b7:6b:6e:
f5:38:df:dd:3c:fd:48:c3:52:c4:04:3e:25:2c:66:e6:c1:88:
cf:26:c0:74:27:a0:8e:85:8b:25:da:9a:cc:b2:49:b1:24:af:
60:f1:a2:b0:89:46:44:44:b6:9f:ee:04:bf:8a:9c:07:4b:0d:
31:7d:60:5b:10:e8:10:b6:08:c8:91:96:e5:a0:03:24:5d:01:
dc:06:a2:05:6e:38:a9:b0:f7:35:85:8b:28:83:53:9f:fb:2f:
b2:fc:22:32:8e:a0:ae:0e:8c:db:e4:cc:d4:9a:80:2b:46:2e:
04:42:fc:72:a0:4f:07:25:54:f6:41:9d:50:2f:41:9b:25:82:
16:35:36:c9:80:9c:b3:3d:ab:b7:28:90:13:24:84:80:ff:82:
0a:70:7c:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0rhVKghG3MqwLoy/tYpptCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MjI1MjBkZTYxNDM3YTZjZTY1YzZlMzQ2Mjc0NzA3MDNl
NjVlZDEwHhcNMjYwMzI2MTkwMDUwWhcNMjYwMzI3MTkwMDUwWjAzMTEwLwYDVQQD
Eyg5NDE0MzZkNGU1NjE1YjhlNjkyYWI2YzIwZTYzMWExOTc5NjFlZTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApalTjdFZNaG9dCgppPBqDwWScTPa
JeE+g7zpzuiE3/Zc2BOQkDScc0kTw8lcUiVLW7+a/4fi+y8unx4Fpg0c5xMhPrty
HkAqWY4eoW3tUxA5ddAxSa7D2dkBb/1q75zeCDePYC37GPV5uk388ryNmQ57ON7z
gB+T0M/5/Ebr0Hay7bfk2wdPtjnsW9sXP/ETM3/JSRvZ/jFQD1qWW2CQjZWG3Sw6
44f6B4TgNJ/6ActKJbIfVyn0t1whRyE6zzHzur/wmx46PlCJNgfXsFkelLzMm+js
Fo4cBFhFhaO/0b1pH4j8+xdHpgacIj+cZdy8mUdig1ij/uggvzp/0EVcqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJQUNtTlYVuOaSq2wg5jGhl5Ye6AMB8GA1UdIwQY
MBaAFEgiUg3mFDemzmXG40YnRwcD5l7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0NKU0RlWVVONmJPWmNialJpZEhCd1BtWHRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9jODZjYzMtMzQ3OC00NDA3LTg0OTEt
N2RjODczZjUyODViLzEvU0NKU0RlWVVONmJPWmNialJpZEhCd1BtWHRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9jODZjYzMtMzQ3OC00NDA3LTg0OTEtN2RjODczZjUyODVi
LzEvU0NKU0RlWVVONmJPWmNialJpZEhCd1BtWHRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUXVYRURO
XZFFv3BDzQo1V/UtssGHPR5eEPZIdawpF40oGVnNO3NxxQYY7mO3aZZ0x6FV1KLm
KSKoB/rFFIVbpcvOPypC1rfi4K/ggt8bqIdSeAtrMnWD4VLxxZbSxZgj/rjawBzj
jhLxt2tu9Tjf3Tz9SMNSxAQ+JSxm5sGIzybAdCegjoWLJdqazLJJsSSvYPGisIlG
RES2n+4Ev4qcB0sNMX1gWxDoELYIyJGW5aADJF0B3AaiBW44qbD3NYWLKINTn/sv
svwiMo6grg6M2+TM1JqAK0YuBEL8cqBPByVU9kGdUC9BmyWCFjU2yYCcsz2rtyiQ
EySEgP+CCnB82A==
-----END CERTIFICATE-----
Generated at Fri Mar 27 00:09:02 2026 by rpki-client